simple-bank-cd.yml

name: simple-bank-cd-image-build

on:
  workflow_dispatch: # To run manually
  push:
    branches: ["main"]
    paths: ["simple-bank/**"]

permissions:
  id-token: write
  contents: read    # This is required for actions/checkout

jobs:
  build:
    name: build image
    runs-on: ubuntu-latest

    steps:
    - uses: actions/checkout@v3

    - name: Install kubectl
      uses: azure/setup-kubectl@v3
      with:
        version: 'v1.25.0'
      id: install

    - name: Configure AWS credentials
      uses: aws-actions/configure-aws-credentials@v1
      with:
        role-to-assume: arn:aws:iam::105745650186:role/simplebank-gh-actions-cd-role
        aws-region: us-east-2

    - name: Login to Amazon ECR
      id: login-ecr
      uses: aws-actions/amazon-ecr-login@v1

    - name: Build .env
      working-directory: ./simple-bank
      run: aws secretsmanager get-secret-value --secret-id simple_bank --query SecretString --output text | jq -r 'to_entries|map("\(.key)=\(.value)")|.[]' > .env

    - name: Build, tag, and push docker image to Amazon ECR
      working-directory: ./simple-bank
      env:
        REGISTRY: ${{ steps.login-ecr.outputs.registry }}
        REPOSITORY: simplebank
        IMAGE_TAG: ${{ github.sha }}
      #-a command in docker push will push all tags
      run: |
        docker build -t $REGISTRY/$REPOSITORY:$IMAGE_TAG -t latest .
        docker push -a $REGISTRY/$REPOSITORY

    - name: Update kube config
      run: aws eks update-kubeconfig --name simple-bank --region us-east-2

    - name: Deploy image to AWS EKS
      run: |
        kubectl apply -f ./eks/aws-auth.yml
        kubectl apply -f ./eks/deployment.yml
        kubectl apply -f ./eks/service.yml